Sending encrypted stuff doesnt do anything, the player already knows its not sensitive information so why not mess around with it a bit?
Theyll experiment and of course if they get banned they can just make a new account anyway and repeat the process like nothing happened. Once he figures it out you obviously could change a few things but whats the fun in that when theyll just find out the new code in a few days thus resulting in a back and fourth game between the game developer and the exploiter.